Legal
Privacy policy
How Synia Aid Foundation collects, uses and protects personal data, and how you exercise your rights under the Nigeria Data Protection Act 2023.
Version 1.0 · pending final review by the Foundation's Nigerian-qualified legal adviser before launch
Who we are
Synia Aid Foundation is the data controller for the personal data described in this policy. We are registered with the Corporate Affairs Commission of the Federal Republic of Nigeria as Incorporated Trustees, registration number CAC/IT/NO 121882. Our head office is No. 34 Osun Crescent, Ancestor's Court, Maitama, FCT, Abuja, Nigeria.
If you have any question about this policy or about how we handle your data, contact us at info@syniafoundation.org or on +234 707 339 1222.
What we collect, why, and for how long
We collect only what each form genuinely needs. If you think we are asking for something we do not need, tell us, we would rather remove a field than hold data without a reason.
| What we collect | Why | Lawful basis | How long we keep it |
|---|---|---|---|
| Contact and enquiry forms name, email, phone (optional), your message | To answer you | Legitimate interest in responding to a person who has contacted us | 24 months from our last contact with you, unless you ask us to delete it sooner |
| Donations name, email, amount, designation, payment reference | To process your gift, send your receipt, honour any restriction you placed on it, and meet our financial record-keeping obligations | Performance of your request, and legal obligation for financial records | Seven years, in line with financial record-keeping requirements |
| Newsletter name (optional), email | To send you the updates you asked for | Your consent, given by a separate, unticked opt-in | Until you unsubscribe, then removed from the mailing list |
| Volunteer and ambassador applications name, contact details, location, background you choose to tell us | To assess your application and, if you are placed, to carry out vetting | Steps taken at your request, and our safeguarding obligations | 12 months if you are not placed; for the duration of your engagement plus six years if you are |
| Complaints and safeguarding concerns whatever you choose to tell us | To respond to the concern and protect anyone at risk | Our safeguarding obligations and the vital interests of the person affected | Held securely and separately, and retained for as long as safeguarding requires |
| Website analytics pages viewed, approximate location, device type | To understand how the site is used so we can improve it | Your consent, given through the cookie banner | Not set unless you accept optional cookies |
Children's data
This website is not directed at children and we do not knowingly collect personal data from children through it. Data about children in our programmes is collected offline, with the informed consent of a parent or carer, and is handled under our Safeguarding Policy. A child's full name is never published alongside their image on this site or anywhere else.
Who we share data with
We do not sell your personal data, and we do not share it for anyone else's marketing. We share it only with:
- Our payment provider, which processes card and transfer payments on its own secure pages. Card details are never stored on this website.
- Our email platform, which sends the newsletter you asked for.
- Our website host and technical suppliers, who process data only on our written instructions.
- Regulators, law enforcement or other authorities, where we are legally required to do so, or where it is necessary to protect someone from harm.
Where your data is held
Some of the services we use, hosting, email and payment processing, may store or process data outside Nigeria. Where that happens, we satisfy ourselves that an adequate level of protection is in place, in line with the cross-border transfer requirements of the Nigeria Data Protection Act 2023 and the General Application and Implementation Directive 2025. You may ask us where your data is held at any time.
How we keep it safe
- The whole site runs over HTTPS, so data is encrypted in transit.
- Access to enquiry and donation records is restricted to the people who need it to do their job.
- Administrator accounts use strong authentication.
- Safeguarding records are held securely and separately from personnel and programme files.
- No card details are ever stored on this website.
Your rights
Under the Nigeria Data Protection Act 2023 you have the following rights. To exercise any of them, email info@syniafoundation.org. We will respond as soon as we can, and in any event within the period the Act requires.
- Access
- Ask us for a copy of the personal data we hold about you.
- Rectification
- Ask us to correct anything that is wrong or incomplete.
- Erasure
- Ask us to delete your data, where we are not required to keep it.
- Restriction and objection
- Ask us to stop or limit how we use your data.
- Withdraw consent
- Where we rely on consent, the newsletter, and analytics cookies, you may withdraw it at any time, and it is as easy to withdraw as it was to give.
- Portability
- Ask for the data you gave us in a machine-readable form.
- Complain
- Complain to us, and to the Nigeria Data Protection Commission if you are not satisfied with our response.
Cookies
We use essential cookies to make the site work, and optional analytics cookies only if you accept them. Nothing non-essential is set before you choose. See our Cookie Policy, where you can also change your choice.
Changes to this policy
If we change this policy we will update this page and change the version note at the top. Where the change is significant we will say so on the site.